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The speed of a quantum random number generator is essential for practical applica¬ 
tions, such as high-speed quantum key distribution systems. Here, we push the speed 
of a quantum random number generator to 68 Gbps by operating a laser around its 
threshold level. To achieve the rate, not only high-speed photodetector and high 
sampling rate are needed, but also a very stable interferometer is required. A prac¬ 
tical interferometer with active feedback instead of common temperature control is 
developed to meet requirement of stability. Phase fluctuations of the laser are mea¬ 
sured by the interferometer with a photodetector, and then digitalized to raw random 
numbers with a rate of 80 Gbps. The min-entropy of the raw data is evaluated by 
modeling the system and is used to quantify the quantum randomness of the raw 
data. The bias of the raw data caused by other signals, such as classical and de¬ 
tection noises, can be removed by Toeplitz-matrix hashing randomness extraction. 
The final random numbers can pass through the standard randomness tests. Our 
demonstration shows that high-speed quantum random number generators are ready 
for practical usage. 
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I. INTRODUCTION 


Random numbers are widely used in many applications such as cryptography, scientific 
simulations, and lotteries. The basic characteristics of true random numbers include un¬ 
predictability, irreproducibility and unbiasedness. Most of true random number generators 
are based on physical systems, in which the quantum random number generator (QRNG) is 
an important approach with randomness coming from the indeterministic nature of quan¬ 
tum physics. Over the last two decades, various QRNG schemes have been proposed and 
implemented^ - —. For instance, a beam splitter scheme^ - - by measuring the path selection 
of single photons has been often used especially in the early stage of the development, 
and commercial QRNG products based on this scheme can be found in the market such 
as the IDQ Quantis that can generate a random bit rate of 4 Mbps. Time measurement 
schemes^-———— by measuring and digitizing the arrival time of single photons have been 
recently proposed. In such schemes, the random bit rate can in principle be improved by 
multiple times compared with the beam splitter scheme, depending on the time resolution. 
Experiments have demonstrated that the random bit rates using this scheme can reach round 
100 Mbps^^Jl However, in both of the above schemes, the speed is mainly limited by the 
count rates of single-photon detectors. 

Bit rate is the key parameter to characterize the performance of QRNG. To significantly 
increase the speeds of QRNGs, new schemes have been recently proposed including vac¬ 
uum state fluctuations^ - — and quantum phase fluctuations^^. In the scheme of quantum 
phase fluctuations^ 1 ^, conventional photodetectors rather than single-photon detectors are 
used to measure quantum effects. The photons coming from a laser originate from two 
mechanisms, i.e., stimulated emission and spontaneous emission. In the standard quantum 
optics model, photons from stimulated emission are normally assumed to have fixed phases, 
whereas photons from spontaneous emission have random phases. Thus, the total phase 
of photons emitted from the laser always fluctuates over time. When the laser is operated 
around its threshold level, the ratio between spontaneous and stimulated emissions could be 
high enough for measurement, which implies that quantum noise may dominate the phase 
fluctuations in this scenario. Once phase fluctuations are converted into intensity fluctua¬ 
tions, the quantum phase noise can be easily measured using classical photodetectors and 
hence quantum randomness is generated. Since photodetectors are much faster than single- 
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photon detectors, bit rates of QRNGs by measuring quantum phase fluctuations could be 
considerably high. Recently, the Toronto group have experimentally demonstrated QRNGs 
with bit rates of 500 Mbps^ and 6 GbpsA^ using the scheme of quantum phase fluctuations. 
However, these rates are still not high enough for some applications. For instance, given a 
10 GHz clocked quantum key distribution (QKD) system- 21 , it requires roughly a 40 Gbps 
random bit stream. Hence, developing a high-speed and low-cost QRNG for such QKD 
system is highly required. 

In this paper, we report a 68 Gbps QRNG based on the scheme of quantum phase fluc¬ 
tuations. The key device in our QRNG system is an actively stabilized interferometer. One 
output port of the interferometer is monitored by an optical power meter, which sends feed¬ 
back signals in real-time to precisely tune a phase shifter in one arm of the interferometer. 
In this way, the interferometer can be stable even without temperature control. The phase 
fluctuations of photons are converted into intensity fluctuations, which are then measured 
with a high-speed photodetector. The voltage amplitudes of the photodetector are digital¬ 
ized as raw random data with a maximum sampling frequency of 10 GHz, which is higher 
than previous implementation with one order of magnitude^. We then develop a model 
for our QRNG system to evaluate the min-entropy of the raw random data, and apply 
Toeplitz-matrix hashing for randomness extraction- 22 . After post-processing, all the random 
bit streams can well pass the standard randomness tests. 

II. QRNG SCHEME AND EXPERIMENTAL SETUP 

Phase fluctuations, or phase noise in the frequency domain, of photons emitted from a 
laser originate from spontaneous emissions and are random in nature, which can be used 
as a quantum random source. Most importantly, phase fluctuations are measurable via an 
interferometer by converting phase into intensity. However, quantum phase fluctuations are 
often mixed with classical noise. To make the readout easier, the ratio between quantum 
noise and classical noise should be as high as possible. In this experiment, when the laser 
is operated at the threshold level quantum noise will be dominant. After modeling and 
quantifying the contribution of quantum noise, quantum random bits are finally generated. 

The experimental setup is shown in Fig. QJi. A 1550 nm laser diode is driven by con¬ 
stant current with thermoelectric cooling control. The continuous wavelength (CW) laser 
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FIG. 1. a) Experimental setup. Photons emitted from a CW laser enter a polarization-insensitive 
Michelson interferometer after passing a circulator. One output port of the interferometer is 
detected by a PD after the circulator. The other output port is monitored by an optical PM. A 
PID program reads the measured values of PM and sends feedback voltage signals to PC to adjust 
the PS. The measured amplitudes of PD are sampled by in build-in 8-bit ADC in a high-speed 
oscilloscope. BS: beam splitter; PS: phase shifter; PM: power meter; PC: piezo controller; FRM: 
Faraday rotator mirror; PID: proportional-integral-derivative control; PD: photodetector; ADC: 
analog-to-digital converter, b) Measured power at OUT1 of the interferometer over 20 minutes, 
which indicates that the active phase stabilization for the interferometer works well. 


is operated slightly above its threshold. Photons emitted from the laser enter a homemade 
Michelson interferometer. The interferometer consists of a 3-port circulator, a 50/50 beam 
splitter (BS), a phase shifter (PS) and two faraday rotator mirrors (FRMs). The time delay 
of about 3.735 ns between the two arms of the interferometer is much smaller than the coher¬ 
ence time of laser. With such a configuration, two FRMs can effectively remove polarization 
effects, which makes the interferometer polarization-insensitive. The interferometer has two 
output ports, i.e., OUT1 and OUT2, as shown in Fig. [l]a. OUT1 is monitored by an optical 
power meter (PM). The measured results of the PM are uploaded to a computer, in which 
a proportional-integral-derivative (PID) algorithm is implemented. The PID program sends 
feedback signals to an open-loop piezo controller (PC, Thorlabs MDT694B) to precisely tune 
the PS in real-time. In such a way, phase stabilization in the interferometer could maintain 
at a high level and conventional temperature control for the interferometer is not required 
any more. Fig. [TJo shows a typical measurement result of optical power at OUT1 over 20 
minutes. The nearly straight line in Fig. [TJo indicates that the interferometer itself is stable 
and slight fluctuations could be regarded as classical noise. OUT2 is detected by a 15 GHz 
photodetector (PD, EOT ET3500F). The voltage output of the PD is sampled by an 8-bit 
analog-to-digital converter (ADC) in a 12 GHz oscilloscope (Agilent DSA91204A) and raw 
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data are generated. Due to the memory limit in the oscilloscope, 20.5 Mpoints or 164 Mbits 
are acquired each time to form one raw data hie. For a sampling rate of 10 GSa/s, the 
corresponding data acquisition period is 2.05 ms. The raw data is then transferred to a 
computer for post-processing. 

III. MIN-ENTROPY ANALYSIS AND POST-PROCESSING 

Here, we evaluate the randomness of the raw data from the QRNG following analysis in 
the literature*^. First, the electric held of the CW laser can be modeled as, 

E{t) = E 0 exp[i(uj 0 t + 0(f))]. (1) 

Then the interferometer output intensity (after interference) with a time delay of AT is 

2 El + 2 El cos [u 0 AT + 9(t + AT) - 0(f)]. (2) 

Here, the phase huctuations of the laser source are measured by the phase difference between 
time f and t + AT, defined as A0(f) = 0(f + AT) — 0(f). After subtracting the direct current 
signal, the measured signal can be described by 

/(f) oc Pcos(cuoAT + A0(f)) = P[cos(cuoAT) cos(A6 l (f)) — sin^oAT) sin(A0(f))]. (3) 

As shown in Fig. [T^, the PS in the interferometer is constantly tuned such that ujqAT is 
2rmr + n/2 (m is an integer). Since A0(f) is small, we have 

/(f) oc Psin(A6 l (f)) « PA9{t). (4) 

Therefore, the phase fluctuation of the laser source can be measured directly by the intensity 
of the interferometer output. In addition to the signals from phase huctuations, the variance 
of the photodetector output also contains background noise, 

(V (t) 2 ) = AP 2 (A9(t) 2 ) + P, (5) 

where A is the linear response constant between the optical input signal and the photode¬ 
tector voltage output. Meanwhile, as discussed previously the total phase huctuations can 
be divided into signals from quantum huctuations (Q/P) and classical ones (C)^^, 

(A 6{t) 2 ) = Q/P + C. (6) 
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FIG. 2. The PD amplitude variance as a function of LD power with different sampling rate ranging 
from 1 GSa/s to 10 GSa/s. The solid line represents the theoretical fit with a sampling rate of 10 
GSa/s. 

Finally, there are three contributions to the measured intensity variance, 

(V(t) 2 ) = AQP + ACP 2 + F. (7) 

In practice, by changing the laser power P , the parameters of AQ, AC, and F can be 
estimated via data fitting. Here, AQP is the quantum signal of interest that should be max¬ 
imized, compared with the classical counterpart ACP 2 + F. With randomness extraction, 
one can remove the correlation between classical noise and the final random bits. 

The amplitude variances of the PD output are measured by precisely tuning the LD 
power from minimum to 10 mW. The PD output is sampled by a high-speed oscilloscope 
with different sampling rates. The time delay of the interferometer and the sampling time 
interval are two free variables that appear in the min-entropy evaluation model^. Taking 
into account that the bandwidths of PD and ADC are 15 GHz and 12 GHz, respectively, 
the maximum sampling rate in the experiment is chosen as 10 Gsa/s. The results are shown 
in Fig. [2] The signal variance responses to the laser power with four different sampling 
rates are highly consistent, where the minor differences are caused by the access noise of 
the measurement, such as the bandwidth and resolution of the oscilloscope. The measured 
values are then fitted, according to Eq. Q, to obtain the parameters AQ, AC, and F. The 
results are listed in Table |U As one can see, the fitting values match with each other in the 
four different sampling cases. 
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TABLE I. The theoretical fitting values of the parameters in the cases of four sampling rates. 


Parameter 

1 GSa/s 

2 GSa/s 

5 GSa/s 

10 GSa/s 

AQ (mV 2 /mW) 

6.0142 

5.8581 

6.0569 

6.2068 

AC (mV 2 /mW 2 ) 

0.4201 

0.4563 

0.4279 

0.3958 

F (mV 2 ) 

0.1714 

0.2052 

0.2200 

0.2162 

R 2 

0.9977 

0.9988 

0.9989 

0.9982 


In order to quantify the randomness of the raw data, a min-entropy evaluation model 
is developed based on our system. To maximize the min-entropy of the raw data, one can 
optimize the ratio of the quantum signals to other noises^ 1 ^, which is defined as, 

= AQP 

1 ACP 2 + F v ' 

This allows the value of 7 to be calculated based on the fitted values of parameters listed 
in Table Q] according to Eq. (| 8 l) . Meanwhile, to verify whether the fitted value of 7 is 
accurate, we employ an experimental approach^ to directly measure this parameter. We 
take advantage of the fact that classical noise should dominate the phase fluctuation when 
the laser power is high enough. Therefore, one can assume that the quantum signal ratio, 
7 , is close to 0 when the LD is operated at its maximum power. Then the classical noise, 
AC, can be directly measured (upper bounded). Note that any finite value of 7 in the high 
power regime would result in an underestimation of the min-entropy for evaluation, which 
is allowed since only the lower bound of the min-entropy is needed in data post-processing. 

I 11 our experiment, the LD is operated at its maximum power (around 12 mW) and a 
digital variable attenuator is used before the interferometer to tune the incident power from 
minimum to 12 mW. Note that the key difference between this setup and the one to acquire 
data for Fig. [2] lies on the position of the variable attenuator. With this setup, the voltage 
variance due to the classical noise at each power can be directly measured. Combining 
the total voltage variance as measured in Fig. [21 the experimental values of 7 in the cases 
of different laser powers and different sampling rates are obtained and shown in Fig. [3J 
The experimental results agree with the theoretically calculated values. For our QRNG, 
the quantum signal ratio reaches its peak value, 7 = 5.46, at the power of 0.9 mW. In 
this optimal condition, signals due to quantum phase fluctuations dominate the sampling 
output. In the experiment, the LD is always operated at the optimal power to generate raw 
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FIG. 3. The quantum signal ratio 7 as a function of LD power with different sampling rates. When 
the LD power is around 0.9 rnW, 7 reaches the maximum value, 5.46. 

random data. 

Combining Eq. (J7J) and Eq. (] 8 ]h the variance of quantum signal is given by, 

c 2 , mnt , m = aqp = v(tf). (9) 

According to the theoretical model- 23 , the quantum signal follows a Gaussian distribution. 
Thus, with its variance given in Eq. (l9|) . one can obtain the whole distribution of the quantum 
signal. The randomness is quantihed with min-entropy, defined as follows, 

iLoo(X) = -log 2 ( max P r [X = x]). (10) 

ie{o,i} n 

Then, the min-entropy of the raw data can be evaluated via the Gaussian distribution. 

In the experiment, the raw sampling data acquired in the oscilloscope are transferred 
to a computer for further post-processing offline. A MATLAB program in the computer 
reads the data of 10 Mpoints each time. The program first sorts all the data and finds 
the minimum and the maximum values to form the voltage range of [VAm, E max ]. Both the 
data in the ranges of the top 0 . 1 % and bottom 0 . 1 % are manually set to the corresponding 
boundaries so that the effective range is changed to [%, %] • This effective range is further 
digitized with 8 bits, corresponding to 256 bins, and all the remaining points are sorted 
out in these bins. In this way, the probability distribution of the raw data is formed and 
the bin that has the maximum probability can be easily found. The min-entropy is related 
to 7 . The theoretical relationship between these two parameters is calculated according 
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FIG. 4. a) The plot of min-entropy versus 7 . Symbols and line represent experimental values and 
theoretical calculation, respectively, b) Optimal values of 7 (left y-axis) and corresponding final 
random bit rates (right y- axis) in the cases of four sampling rates. With a sampling rate of 10 
GSa/s, the random bit rate reaches 68 Gbps. 

to the Gaussian distribution, as shown by the solid line of Fig. H)t. The increase slope of 
min-entropy is steep when 7 is small, but becomes rather flat when 7 > 5. In the cases of 
four sampling rates, the values of 7 are measured as shown in the left y-axis of Fig. [ 4 ) 3 , and 
the values of min-entropy are obtained as well. 

In the case of 0.9 111 W laser power and 10 GSa/s sampling rate, the total voltage variance 
is (V(t) 2 ) = 5.24 mV 2 while the quantum part is cr 2 uantum = 4.49 mV 2 . The effective voltage 
range is 10.2 mV and the maximum probability is P ma x — 7.6 x ICE 3 . According to Eq. (fT0|) . 
the min-entropy in the case is 7.04 bits per sample point or 0.88 bits per bit, which means 
that 7.04 random bits can be generated from each sample. Multiplying by the sampling rate 
of 10 Gsa/s, the resulting random bit rate is 70.4 Gbps. 

A Toeplitz-matrix hash function based on fast Fourier transform (FFT) — with a size 
of n x m (n = 3.36 x 10' and m = 2.88 x 10') is applied, which means that m final 
random bits are generated from n raw random bits. Therefore, the min-entropy is slightly 
decreased to 0.86 bits per bit ( m/n ) so that the final bit rate reaches 68 Gbps. Compared 
with previous realizations based on quantum phase fluctuation schemes^— and other QRNG 
i nip lenient ationaV-——, the bit rate of our QRNG has been drastically increased. 

Since the values of quantum-to-noise ratio 7 are almost constant for different sampling 
rates, the final random bit rate is linearly proportional to the sampling rate as shown in the 
right ?/-axis of Fig. [ 4 ) 3 . Here, we want to point out that the real-time QRNG speed might 
be further limited by the implementation of data post-processing — randomness extraction. 
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FIG. 5. a) The autocorrelations of the raw data with different sampling rates. Data size of each 
file is 10' samples and each sample consists of 8 bits, b) The autocorrelations of the Toeplitz- 
hashing output. Data size of each hie is 10 7 bits. The autocorrelations are substantially reduced 
by Toeplitz-hashing. 

In our post-processing, the Toeplitz-matrix hash function is implemented by a MATLAB 
program on a personal computer—. The testing real-time randomness extraction rate of the 
program is about 1.6 Mbps. If the extraction is implemented by hardware, such as fast field- 
programmable gate arrays (FPGAs), the rate might reach a few hundreds of Mbps, or even 
Gbps regime. With multiple randomness extraction processors in parallel, a post-processing 
implementation that can match our QRNG is likely to be feasible. This is a very interesting 
perspective research topic for electric engineering. 

Classical noise can introduce bias and autocorrelation to the raw data. Thus, the raw 
data fails to pass half of the items in the NIST statistical tests 26 '. The autocorrelation results 
of the raw data and final random bits after Toeplitz-hashing are shown in Fig. [5] There are 
no significant differences between different sampling rates ranging from 1 GSa/s to 10 GSa/s 
— . The relatively large autocorrelation coefficient of the raw data as shown in Fig. [5}a is due 
to the fact that sampling time interval is shorter than the time delay between two arms of 
the interferometer in the experiment. This result is consistent with the theoretical model of 
the QRNG^. After Toeplitz-hashing, the autocorrelation is substantially reduced as shown 
in Fig. [5]o, and it is consistent with the scope of statistical fluctuations. It indicates that 
Toeplitz-hashing extraction is effective in the data post-processing for our experiment. 

To further test and verify the quality of the final output random bits, we apply the 
standard NIST statistical tests^S. The p-values and the proportions of all the test items 
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TABLE II. . The results of the standard NIST tests for final random bits. Data size of each bits 
string is 1 Gbits. In the tests producing multiple outcomes, a Kolmogorov-Smirnov (KS) uniformity 
test has been further performed for p-values, and the corresponding proportions are averaged. All 
the p-values are larger than 0.01 and all the proportions are larger than 0.98, which indicates that 
random bits well pass the NIST tests. 


Statistical test 

1 GSa/s 

2 GSa/s 

5 GSa/s 

10 GSa/s 

P-value 

Proportion 

P-value 

Proportion 

P-value 

Proportion 

P-value 

Proportion 

Frequency 

0.4731 

0.991 

0.6288 

0.994 

0.1209 

0.987 

0.6288 

0.990 

Block Frequency 

0.5728 

0.985 

0.4172 

0.991 

0.2940 

0.991 

0.2925 

0.992 

Cumulative Sum 

0.5667 

0.988 

0.3770 

0.993 

0.6662 

0.985 

0.4313 

0.991 

Runs 

0.8360 

0.986 

0.9915 

0.992 

0.9932 

0.992 

0.6121 

0.993 

Longest Run 

0.2983 

0.992 

0.5362 

0.993 

0.0401 

0.986 

0.0904 

0.991 

Rank 

0.3299 

0.992 

0.1495 

0.993 

0.7792 

0.990 

0.2111 

0.992 

FFT 

0.9335 

0.983 

0.0259 

0.988 

0.3056 

0.989 

0.5281 

0.992 

Non Overlapping Template 

0.0662 

0.990 

0.0507 

0.990 

0.1331 

0.990 

0.0599 

0.990 

Overlapping Template 

0.4065 

0.991 

0.6080 

0.987 

0.8963 

0.987 

0.0707 

0.984 

Universal 

0.0366 

0.992 

0.1917 

0.990 

0.4885 

0.987 

0.7157 

0.986 

Approximate Entropy 

0.0721 

0.986 

0.2417 

0.988 

0.0469 

0.991 

0.5141 

0.994 

Random Excursions 

0.3666 

0.991 

0.2875 

0.989 

0.1214 

0.989 

0.3026 

0.991 

Random Excursions Variant 

0.1849 

0.991 

0.1810 

0.991 

0.2557 

0.987 

0.1407 

0.991 

Serial 

0.7439 

0.994 

0.6579 

0.989 

0.5997 

0.990 

0.6559 

0.992 

Linear Complexity 

0.9229 

0.992 

0.3086 

0.993 

0.1816 

0.990 

0.5976 

0.991 


in four cases are listed in Table ED For the test items that produce multiple outcomes, a 
Kolmogorov-Smirnov (KS) uniformity test is further performed for the p-values, and the 
proportions are averaged. Clearly, all the data passes the NIST tests. 


IV. CONCLUSION 

In conclusion, we have demonstrated a 68 Gbps QRNG based on quantum phase fluctu¬ 
ations. With the help of an actively stabilized interferometer, the laser phase fluctuations 
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can be converted into intensity fluctuations for sampling and further digitizing. The QRNG 
system works stably without temperature control. We experimentally measured the ratio of 
quantum noise to classical noise so that the min-entropy of the raw data can be effectively 
evaluated. Toeplitz-matrix hashing is then used to extract final random bits, which pass 
the standard NIST tests well. With a sampling rate of 10 GSa/s, the final random bit 
rate reaches 68 Gbps, which shows a dramatic improvement compared with existing QRNG 
implementations. Our QRNG could be a practical approach for some specific applications 
such as QKD systems with a clock rate of over 10 GHz. An interesting question to ask is 
what is the limitation of this QRNG, given high enough precision of the data acquisition 
system and interferometer. Also, in our scheme the LD can be replaced with light-emitting 
diode (LED). 
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